Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
File:                     6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa (raw, json)
Hash identifier:          Y6hlAofIhVL7bzl0CgXPQwEvgbdrVSksYDLas2za94E=
Subject key identifier:   16:C5:36:6C:17:4C:59:02:57:73:BC:30:F3:B2:4D:40:33:A7:27:96
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F4328584890C3CF97397CAA5BF4B9B500
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa
Signing time:             Thu 16 Jan 2025 16:37:49 +0000
ROA not before:           Thu 16 Jan 2025 16:37:49 +0000
ROA not after:            Wed 16 Apr 2025 15:37:49 +0000
asID:                     36242
IP address blocks:        208.78.36.0/24 maxlen: 24
                          208.78.37.0/24 maxlen: 24
                          208.78.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:c3:cf:97:39:7c:aa:5b:f4:b9:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Jan 16 16:37:49 2025 GMT
            Not After : Apr 16 15:37:49 2025 GMT
        Subject: CN=03bce333-582f-4eb7-860b-8a7cf43502cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a0:c7:62:8a:4d:4c:2f:a9:5c:29:43:ce:6c:
                    c1:84:fe:81:2c:79:34:68:53:d3:8c:85:48:b8:24:
                    07:e0:13:b4:60:e9:0e:35:05:56:2e:c2:e4:f3:5a:
                    35:ec:59:95:8b:13:1a:d2:22:a8:2d:55:3c:c7:85:
                    f6:45:54:7a:32:c2:60:c5:1a:4b:6d:15:63:9c:d5:
                    33:e7:94:42:0c:c6:25:54:27:11:31:4a:2d:44:7d:
                    ec:7b:4f:aa:83:df:81:a6:0c:db:46:2d:3c:92:af:
                    e0:5b:c0:5b:a8:ca:4d:bd:20:74:0f:57:e7:53:82:
                    2b:65:ca:5f:6d:36:d1:bf:32:87:51:bd:66:4b:5b:
                    88:24:a9:fb:15:8f:6e:c8:90:63:7b:9a:22:00:2b:
                    fe:0e:98:94:79:9e:8e:31:e9:d6:07:9d:d7:84:57:
                    a8:13:59:44:87:8d:a7:2e:18:ca:98:63:a5:20:ea:
                    a3:2b:b2:37:b1:d1:61:41:b8:16:e8:c7:d5:54:2c:
                    fe:8a:5e:5d:c7:fa:0e:37:26:66:81:f6:bb:69:1f:
                    3d:14:16:60:93:bb:9c:ba:30:f6:67:58:f5:51:56:
                    bc:d2:97:e8:17:61:89:a1:16:93:15:52:af:77:06:
                    6d:54:39:14:65:e2:be:32:8e:f1:2e:76:9d:16:ca:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:36:6C:17:4C:59:02:57:73:BC:30:F3:B2:4D:40:33:A7:27:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/6cd600bd-2230-3b8c-bf6a-5e933858a29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.36.0/23
                  208.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:fd:3b:0e:e1:46:ff:a1:70:b1:ed:44:79:93:6a:c5:95:23:
         66:fb:8d:b6:7f:23:f0:39:02:b5:78:01:7c:26:13:c0:7f:d6:
         3c:f0:3c:59:25:39:af:c7:b9:7a:a4:8c:fe:6b:dd:1e:6a:43:
         3e:09:86:96:f2:6b:3c:37:3d:35:52:ac:21:05:6e:3e:72:0a:
         bb:63:5f:de:2e:b4:21:5b:cf:e1:f9:eb:87:37:18:13:08:ef:
         16:e2:6f:c1:38:9d:1a:54:53:03:f4:1d:47:61:88:b9:86:b1:
         d4:87:f4:83:9a:dc:a0:3c:01:0b:14:c8:dc:b2:fc:4f:38:1a:
         b3:38:8b:d1:44:5b:7d:df:2c:1a:c4:64:5a:1d:3a:6c:32:22:
         e3:04:a2:4b:6f:dd:f3:a7:f4:89:f1:55:f6:54:38:21:29:e7:
         0a:5e:02:be:ce:f2:6d:63:42:11:1f:56:e5:15:3f:09:66:f6:
         22:21:c9:5b:e1:8d:f2:ec:33:ae:97:0a:3f:e0:d0:ac:85:14:
         e6:8b:1d:81:1f:05:2c:56:2b:43:a2:3c:63:28:d4:7a:e9:bb:
         ba:ff:92:a1:59:91:7c:9f:50:6f:4c:e8:8b:c6:70:36:18:7a:
         ef:3f:8a:f9:31:6d:c6:5d:f4:1c:e8:a0:d0:15:ea:b9:41:76:
         de:0e:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:42 2025 by rpki-client